CVE Intelligence
Analysis AI-assisted

CVE-2020-37050: Quick Player Buffer Overflow via Malicious .m3l File

CVE-2020-37050 describes a buffer overflow in Quick Player 1.3 that can be triggered by loading a crafted .m3l file, according to the record description. The CNA VulnCheck assigns a CVSS 3.1 base score of 9.8 (critical) and the record maps the flaw to CWE-120. The record shows no CISA KEV listing and contains no affected or fixed version data.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2020-37050 affects Quick Player 1.3 and is classified as a classic buffer overflow (CWE-120). The record describes arbitrary code execution through a specially crafted .m3l file loaded by the application. The entry was published on 2026-01-30 with CNA disclosure@vulncheck.com and a recorded source status of Deferred.

Impact

  • The record states that the flaw may allow arbitrary code execution and potentially remote code execution.
  • VulnCheck's CVSS 3.1 vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H corresponds to a base score of 9.8, which describes network reachability, low complexity, no privileges required and no user interaction in the vector.
  • A CVSS 4.0 base score of 8.4 is also recorded by the same provider.

Affected products and versions

  • The record names Quick Player 1.3. The structured affected list is empty, so the full range of affected versions is unknown.
  • No fixed version is listed. The absence of a fixed version in the record does not mean that no fix exists.

Exploitation status

  • The KEV entry in the record is not listed. No confirmed exploitation in the wild appears in the sources consulted.
  • The reference list includes a public Exploit-DB entry and archived blog posts about the product. Their presence shows that public technical material exists, but it does not confirm exploitation against real systems.

Remediation and mitigation

  • Inventory all systems where Quick Player is installed and check with the vendor or a trusted source for an updated or supported release.
  • Avoid opening .m3l files from untrusted sources, including email attachments and downloads, until the software is verified as updated or removed.
  • If no fix is available, remove the application or restrict its use to isolated systems.
  • Run the application with least privilege and use application allowlisting to limit execution from user-writable directories.

Detection guidance

  • Monitor for Quick Player processes that start unexpected child processes or make unusual network connections.
  • Track the receipt and opening of .m3l files from email and download channels.
  • Review endpoint logs for unexpected application crashes, which can indicate malformed input handling.

Limitations of the available information

  • The record does not include vendor advisory content, affected or fixed version ranges, or the build details needed to confirm exposure.
  • EPSS and SSVC data are not available in the record.
  • The reason for the Deferred source status is not stated.

Frequently asked questions

Is CVE-2020-37050 known to be actively exploited?

The record shows no KEV listing, so no confirmed exploitation in the wild appears in the sources consulted. Public references exist, but they do not confirm attacks.

Which version is affected and is there a fix?

The record names Quick Player 1.3, but no affected range or fixed version is listed. Check the vendor or a trusted source for an updated release and treat unknown exposure as a risk until verified.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.